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dn: cn=managerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsSimpleRole 
objectclass: nsManagedRole 
cn: managgerrole 

description: Manager Role within the Company 
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dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 
objectclass: person 
objectclass: inetorgperson 
uid: pointyhair 
gn: pointy 
sn: hair 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 
description: Pointy Haired Manager 
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dn: cn= building"! 2people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: building"! 2people 

nsRoleFilter: building=12 

description: People who work in building 12 
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dir. cn=megamanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
cn: megamanaggerrole 
nsRoleDN: cn=managerrole, dc=dom, dc=ain 
nsRoleDN: cn=networkmanager, dc=dom, dc=ain 

description: Super Manager Role within the 
Company 
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dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsEnumeratedRole 
objectclass: groupofuniquenames 
cn: peonrole 

groupmember: uid=dboreham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 
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FOR EACH ENTRY WITHIN SCOPE, 
THE COMPUTED ATTRIBUTE nsROLE 
IS CALCULATED. 
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THE COMPUTED ATTRIBUTE nsROLE 
IS EXAMINED TO SEE IF THE ROLE 
IS PRESENT. 



i 



THIS RESULTS IN A LIST OF 
ENTRIES THAT POSSESS THE ROLE. 



THE LIST IS THEREAFTER 
RETURNED TO A CLIENT. 
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rdn of entry 
{null} 

{ country = us} 



f ORGANIZATION = 
\ MEGA CORP 



} 



ORGANIZATIONAL 
UNITS = SALES; 
LOCATION = PALO 
ALTO 



distinguished 
name of entry 

{null} 



{ country = us} 

{country = us} 
^organization ="1 

\ MEGA CORP j 

{ COUNTRY = US} 
/ORGANIZATION ="\ 
1 MEGA CORP J 
ORGANIZATIONAL 
UNIT = SALES; 
LOCATION = 
PALO ALTO 
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Dn:cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosClassicDefinition 
cosTemplate 

Dn: cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceClass 
cosAttribute: mailboxquota 
cosAttribute: maysendexternalmail 




dn: cn=user, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 10000000 

maysendexternalmail: TRUE 

dn: cn=guest, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 
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dn: cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cos PointerDef in ition 
cosTemplateDn: ou=people, o=acme 
cosAttribute: facsimilieTelephoneN umber default 
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dn: cn=messaging_server_cos, ou=people, o=acme 

objectclass: top 

objectclass: LDAPSubentry 

objectclass: cosSuperDefinition 

objectclass: cos I ndi rectDef in itio n 

coslndirectSpecifler: manager 

cosAttribute: accountingCode 




